how to give access to secruity console for ERP modules only, not for HCM modules?

Summary:

We would like a role that allows to assigns roles and duties to only ERPusers, not for HCM users, and that this role is blocked to have access to HR related modules and data

Content (please ensure you mask any confidential information):

Version (include the version you are using, if applicable):

Code Snippet (add any code snippets that support your topic, if applicable):